IsacaIsaca
CRISC · Question #17
CRISC Question #17: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #17. The question stem and answer options stay visible for context.
Submitted by obi.ng· Apr 18, 2026Governance
Question
An organization has decided to use an external auditor to review the control environment of an outsourced service provider. The BEST control criteria to evaluate the provider would be based on:
Options
- Aa recognized industry control framework
- Bguidance provided by the external auditor
- Cthe service provider's existing controls
- DThe organization's specific control requirements
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Outsourced services risk#Control evaluation criteria#Vendor risk management#Organizational accountability